Endpoint Protection

Hello everyone, So I installed shared insight cache to evaluate the effectivness. I installed Shared Insight cache on a dedicated server running on Server 2012. I have also set up AV policy to connect to this server. However I am not seeing any activity meaning I cant see if the SIC is working properly.

I can telnet fine from the agent to SIC on port 9005 and 9006 fine.

Any 1 ?

Hello,

Have you made this change as below?

Secondly, to confirm if Shared Insight Cache is working - 

See if this script helps:

https://www-secure.symantec.com/connect/downloads/...

OR

Check this Thread which may assist you - 

https://www-secure.symantec.com/connect/forums/shared-insight-cache-server-working

Regards,

Hi Mithun, can you please share the username admin is for what ? Is the admin of SEPM ?.

The policy I have in SEPM, doesnt have any user listed in username.

Thanks

The below article talks about the SIC's log files which should show you whether or not it's being used:

http://www.symantec.com/docs/HOWTO81025

Whereas this other article describes the various settings within the SIC:

http://www.symantec.com/docs/HOWTO81023

NOTE: by default, a username and password are not required.

You should also see from the "Scan Details" logs on either the SEP client or from the SEPM itself, the number of "files skipped" increasing.